
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12571360324911F1A0832E17B0833773.roa
File: 12571360324911F1A0832E17B0833773.roa (raw, json)
Hash identifier: XDiNRgaFE2sz1YJHASYvqV0y/Lpr44o2ZVryRU4V6/Y=
Subject key identifier: C3:AC:58:AF:AE:11:8D:2C:34:1F:72:73:95:CA:AA:2D:07:C1:35:A3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E977
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12571360324911F1A0832E17B0833773.roa
Signing time: Sun 31 May 2026 17:36:18 +0000
ROA not before: Sun 31 May 2026 17:36:18 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150618
IP address blocks: 103.68.87.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59767 (0xe977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:36:18 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7191-e769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:6f:71:32:be:e0:a9:c6:35:9b:bb:f8:92:
dc:20:8f:ab:64:63:5b:6f:e5:d0:45:5e:cf:66:42:
1b:7d:70:ac:0e:5f:78:cd:9e:cf:25:b5:58:be:9f:
56:59:9d:51:59:94:d1:6a:79:b9:2f:5a:8c:ff:1e:
24:e3:b4:74:5a:f6:ab:01:38:5d:b6:d5:14:39:e0:
58:9b:23:58:e7:48:c5:a3:a3:46:41:44:bd:fd:05:
4b:fa:03:00:b3:55:3b:98:8f:dd:4b:6d:80:f7:3b:
8e:ae:3f:55:74:fb:ba:3e:38:07:3c:50:e6:51:33:
14:3b:2e:88:93:a5:e6:fb:ea:b1:c9:82:09:5a:3e:
40:2a:81:3b:e2:1d:f8:67:c6:3c:50:3b:c9:6e:16:
ff:b1:e7:f7:8d:70:e9:63:16:0f:72:06:14:36:6a:
91:e0:5f:12:bc:07:76:70:66:41:8e:c3:07:6b:89:
b1:5b:e2:93:f3:31:61:00:c8:ab:75:c7:bd:ad:a1:
d9:c8:b2:2b:68:c5:7f:7b:c7:7c:90:c8:67:2d:a8:
bd:90:ec:3b:4b:51:9d:8f:7e:eb:20:29:6b:7f:89:
e4:ef:01:4a:0f:8e:ea:50:f3:77:57:f2:51:84:b8:
44:84:4c:5c:2c:fe:77:8d:a9:ed:b7:65:f9:37:46:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:58:AF:AE:11:8D:2C:34:1F:72:73:95:CA:AA:2D:07:C1:35:A3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12571360324911F1A0832E17B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.87.0/24
IPv6:
2001:df1:d240::/48
Signature Algorithm: sha256WithRSAEncryption
65:87:31:09:31:8d:d5:71:09:14:a1:b4:fb:07:cf:ec:26:9e:
17:cb:c4:6c:05:78:af:a6:67:29:01:0c:6f:fe:f9:03:08:97:
0c:82:ba:30:97:45:87:0c:d6:26:cb:b6:e1:37:db:b0:47:75:
28:55:dd:4e:ef:b9:c5:18:ce:2f:bd:72:b7:6e:bc:a6:28:f4:
27:c2:4c:ee:3a:57:86:1f:91:c9:9c:f8:c5:e4:1a:d4:0a:fe:
0f:b8:89:d2:f9:b5:40:8c:ff:7d:be:f2:b9:7c:ee:05:11:2e:
1e:50:ec:fa:f5:98:db:92:a5:c7:de:eb:fe:bc:0d:27:e7:31:
c5:53:65:32:85:77:67:3f:9c:89:38:70:bb:56:cd:b3:20:40:
ac:54:bb:49:06:9e:6e:50:28:e3:e3:82:40:b6:d1:8e:cb:9a:
41:b6:84:0b:3e:c2:6e:e1:0f:3f:05:c4:40:e8:6d:27:ee:b8:
3c:30:e5:06:c1:36:0f:fc:a2:17:23:90:27:d4:18:38:9c:90:
ee:8b:b3:27:3c:6b:9e:a1:55:14:51:4c:3e:92:5f:52:a3:9a:
74:0d:c4:aa:ba:df:97:1f:3f:e8:c2:7b:2d:97:1a:bd:c3:f7:
bf:27:ab:7f:9c:a7:c1:47:22:72:83:c9:21:bb:cd:5d:82:23:
38:4b:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:20 2026 by rpki-client